Privacy Commissioner of Canada Releases Findings of Investigation Into TikTok ⇥ priv.gc.ca

Catharine Tunney, CBC News:

The immensely popular social media app TikTok has been collecting sensitive information from hundreds of thousands of Canadians under 13 years old, a joint investigation by privacy authorities found.

[…]

The privacy commissioners said TikTok agreed to enhance its age verification and provide up-front notices about its wide-ranging collection of data.

Off the top, the Privacy Commissioner’s report was limited in scope and did not examine “perceived risks to national security” since they were not related to “privacy in the context of commercial activity” and have been adjudicated elsewhere. The results of national security reviews by other agencies have not been published. However, the Commissioner’s review of the company’s privacy practices is still comprehensive for what was in scope.

TikTok detects and removes about 500,000 accounts of Canadian children under 13 annually. Yet even though the company has dedicated significant engineering efforts to estimating users’ ages for advertising and to produce recommendations, it has not developed similar capabilities for restricting minors’ access.

Despite my skepticism of the Commissioner’s efficacy in cases like these, this investigation produced a number of results. TikTok made several changes as the investigation progressed, including restricting ad targeting to minors:

As an additional measure, in its response to the Offices’ Preliminary Report of Investigation, TikTok committed to limit ad targeting for users under 18 in Canada. TikTok informed the Offices that it implemented this change on April 1st, 2025. As a result, advertisers can no longer deliver targeted ads to users under 18, other than according to generic data (such as language and approximate location).

This is a restriction TikTok has in place for some regions, but not everywhere. It is not unique to TikTok, either; Meta and Google targeted minors, and Meta reportedly guessed teens’ emotional state for ad targeting purposes. This industry cannot police itself. All of these companies say they have rules against ad targeting to children and have done so for years, yet all of them have been found to ignore those rules when they are inconvenient.